$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa File: eF7suSmq4yx2BFY6d-cohJB91BY.roa (raw, json) Hash identifier: DzC5PB8kYDwTA0jqU0RlOi93jFxS5F+OZkkhZlumqbU= Subject key identifier: 78:5E:EC:B9:29:AA:E3:2C:76:04:56:3A:77:E7:28:84:90:7D:D4:16 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2945 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa Signing time: Fri 01 Sep 2023 10:06:20 +0000 ROA not before: Fri 01 Sep 2023 10:06:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 123.195.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10565 (0x2945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:06:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=785EECB929AAE32C7604563A77E72884907DD416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:08:3d:89:de:dc:36:42:b2:ad:8d:9f:f8: 9c:4c:6e:78:31:78:eb:63:b6:cd:c7:17:ce:85:90: e2:f9:e3:01:7c:20:12:a3:6f:0e:85:27:a1:8b:c4: 21:9f:f1:e0:e4:f0:f5:f8:c8:56:4d:04:5b:7b:57: f5:15:b5:11:0c:ff:69:17:68:8a:f8:77:2f:64:8d: f9:92:fb:0e:16:c5:62:26:ae:db:73:d0:fa:8d:62: 40:cb:db:d3:3d:dc:d4:bc:08:f8:e4:97:17:30:a8: cd:a2:f8:21:82:3b:9b:be:f5:f5:d5:cb:8f:44:c8: 5e:ca:dc:9f:b1:0c:91:7f:67:97:02:2f:63:2e:6f: 48:93:f1:b5:2a:5c:ad:76:31:97:02:5a:5c:a9:b6: 09:4a:36:9d:2f:ff:b7:16:ec:ea:e4:16:c4:6f:5d: 81:7a:cf:ce:99:2b:6c:58:8a:1b:a6:0c:43:39:de: e3:d9:87:ed:d9:7c:02:6b:5e:aa:f0:73:c6:db:96: 2f:e8:3d:f1:36:69:8a:a7:dd:43:ec:12:12:54:e6: 73:14:47:44:2e:2f:2a:41:7a:57:3f:c7:ef:98:bb: ae:a5:b1:ea:f0:08:36:17:a8:34:62:ff:eb:6c:44: fa:af:cb:e9:e9:e8:59:16:35:a0:cd:f4:3b:c2:6d: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:EC:B9:29:AA:E3:2C:76:04:56:3A:77:E7:28:84:90:7D:D4:16 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eF7suSmq4yx2BFY6d-cohJB91BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.224.0/21 Signature Algorithm: sha256WithRSAEncryption 44:f6:9c:16:19:be:34:e8:c2:8b:4d:a1:7e:39:2c:ee:6b:27: a4:fb:d8:2c:8f:7c:ea:ad:2c:58:8b:14:71:74:72:ea:70:7e: bc:57:4a:1f:d1:a9:2e:ff:74:c3:1c:fb:6b:1d:60:83:1a:60: d5:ad:55:05:c1:58:d1:92:d1:9b:32:68:d5:f6:54:a8:b1:e4: 64:f1:5f:a0:b1:ca:0c:95:12:8f:4b:59:44:21:ff:09:06:f1: 0e:aa:12:87:75:f3:a6:0a:81:e4:92:fe:b4:25:1f:4f:d4:5e: 2a:2c:51:af:9f:91:de:3a:8c:c2:7d:80:87:86:59:fa:24:dc: e0:66:1a:7b:30:d7:92:81:3f:5f:af:3a:b8:d5:b8:29:17:84: 71:09:20:9d:9b:0b:3b:54:11:b6:85:57:51:83:de:60:b6:ea: 21:fd:78:47:c4:6e:61:82:7f:73:08:3f:c8:35:cb:79:17:4e: 08:e2:26:dd:4b:47:69:e6:d0:18:8f:20:f9:9e:9e:2e:7c:43: a1:d4:35:ac:be:cb:ad:24:7c:3b:dc:f3:58:43:4d:68:ac:4b: 49:d1:06:e3:6b:cb:a0:23:b5:d2:32:3b:d0:8c:30:3c:bd:fd: 34:09:21:c8:db:4f:9b:5b:36:ba:b1:9a:f4:40:f7:e4:bc:5f: 93:4e:1e:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA2MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4NUVFQ0I5MjlBQUUz MkM3NjA0NTYzQTc3RTcyODg0OTA3REQ0MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXbAg9id7cNkKyrY2f+JxMbngxeOtjts3HF86FkOL54wF8IBKj bw6FJ6GLxCGf8eDk8PX4yFZNBFt7V/UVtREM/2kXaIr4dy9kjfmS+w4WxWImrttz 0PqNYkDL29M93NS8CPjklxcwqM2i+CGCO5u+9fXVy49EyF7K3J+xDJF/Z5cCL2Mu b0iT8bUqXK12MZcCWlyptglKNp0v/7cW7OrkFsRvXYF6z86ZK2xYihumDEM53uPZ h+3ZfAJrXqrwc8bbli/oPfE2aYqn3UPsEhJU5nMUR0QuLypBelc/x++Yu66lserw CDYXqDRi/+tsRPqvy+np6FkWNaDN9DvCbWvhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeF7suSmq4yx2BFY6d+cohJB91BYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VGN3N1U21xNHl4MkJGWTZk LWNvaEpCOTFCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w+AwDQYJKoZIhvcNAQELBQADggEBAET2nBYZvjTowotNoX45LO5rJ6T72CyPfOqt LFiLFHF0cupwfrxXSh/RqS7/dMMc+2sdYIMaYNWtVQXBWNGS0ZsyaNX2VKix5GTx X6CxygyVEo9LWUQh/wkG8Q6qEod186YKgeSS/rQlH0/UXiosUa+fkd46jMJ9gIeG Wfok3OBmGnsw15KBP1+vOrjVuCkXhHEJIJ2bCztUEbaFV1GD3mC26iH9eEfEbmGC f3MIP8g1y3kXTgjiJt1LR2nm0BiPIPmeni58Q6HUNay+y60kfDvc81hDTWisS0nR BuNry6AjtdIyO9CMMDy9/TQJIcjbT5tbNrqxmvRA9+S8X5NOHqs= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:06 2024 by rpki-client on console-ams.rpki-client.org